5760 Central Web Auth with ISE

[Koevi Vong]

Hi,

I am having problems with getting central web auth to work on the 5760, I cant seem to find any documentation for the 5760-Central Web Auth.

The setup is with a Cisco 5760 and Cisco ISE, for guest users to be re-directed to ISE guest portal to authenticate. Has anyone configured this or have any advice, that would be great.

Thanks

[Sandeep Choudhary]

Did u visited this page:

http://www.cisco.com/en/US/docs/wireless/technology/5760_deploy/Supported_Features.html#wp1066296

Reagrds

[Koevi Vong]

Yup, I have also read the full deployment guide. Theres nothing on Central Web Auth, unless it has been renamed to another name for the IOS XE WLC.

[Charlie Moreton]

Koevi,

I believe what you are looking for is housed here:

Converged Access – Configure SSID for Central Web Authentication (CWA) using ISE on Catalyst 3850 Switches and 5760 Wireless Controller

https://supportforums.cisco.com/docs/DOC-34455

[Roger Alderman]

Hi

Did you find an answer to this?

I have the same issue with a Cisco 3850 and ISE.

All I want to do is use a Sponsor to create the guest accounts and then use central web auth.

The Sponsor bit is easy but there is virtually no documentaion to show how to configure both the 3850 and ISE to achieve CWA. All the documentation tends to use a 5500 type WLC.

[Koevi Vong]

Hi Roger,

I have gotten CWA running on the 5760 with ISE, below is the config for the guest SSID:

wlan Guest 1 TEST-guest

aaa-override

ip dhcp required

mac-filtering cwa_macfilter

mobility anchor 10.1.1.100

nac

no security wpa

no security wpa akm dot1x

no security wpa wpa2

no security wpa wpa2 ciphers aes

security dot1x authentication-list ISE_Auth_Group

session-timeout 14400

no shutdown

!

! ***You will need the following commands as well:

ip http server

ip http authentication local

ip http secure-server

!

aaa authentication login ISE_Auth_Group group ISE

aaa authorization network cwa_macfilter group ISE

!

Hope it helps =)